13169 matches found
Skype 7.16.0.102 DLL Hijacking
Vulnerability Title: Skype Insecure Library Loading Vulnerability api-ms-win-core-winrt-string-l1-1-0.dll Affected Product: Skype Vendor Homepage: https://www.microsoft.com/en-us/ MSRC Case 32355 TRK:0001002846 CVE-ID : CVE-2017-6517 Severity: Medium Description: Microsoft Skype contains a DLL...
MS17-012: Security Update for Microsoft Windows (4013078)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Device Guard due to improper validation of certain elements in a signed PowerShell script. An unauthenticated, remote attacker can...
Microsoft Windows Multiple Vulnerabilities (4013078)
This host is missing a critical security update according to Microsoft Bulletin MS17-012. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2016-8012
Access control vulnerability in Intel Security Data Loss Prevention Endpoint DLPe 9.4.200 and 9.3.600 allows authenticated users with Read-Write-Execute permissions to inject hook DLLs into other processes via pages in the target process memory get...
CVE-2016-8008
Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus SSP 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system...
CVE-2017-6903
Ioquake3 and related id Tech 3 forks are affected by CVE-2017-6903 due to insufficient restrictions on auto-downloaded content. A malicious auto-downloaded file could be loaded as native code DLLs, and its configuration defaults could override user settings, potentially causing sandbox escape thr...
Privilege escalation
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
CVE-2017-2983
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
CVE-2017-2983
Summary of CVE-2017-2983 : The vulnerability affects Adobe Shockwave Player versions up to 12.2.7.197. The issue is an insecure library loading (DLL hijacking) flaw that could allow an unauthenticated attacker to trigger arbitrary code execution and potential privilege escalation by loading a mal...
CVE-2017-2983
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to escalation of privilege...
Windows DLL Loading Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete...
Microsoft Windows DLL Loading Remote Code Execution (MS17-012: CVE-2017-0039)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to the way Windows improperly validates input before loading certain libraries. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted file...
Microsoft Windows CVE-2017-0039 DLL Loading Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microso...
Trend Micro Endpoint Sensor DLL loads remote code execution vulnerability (CNVD-2017-03613)
Trend Micro Endpoint Sensor is a context-aware endpoint security monitor from Trend Micro designed to accelerate discovery, investigation and response to security incidents. Trend Micro Endpoint Sensor suffers from a DLL loading remote code execution vulnerability. An attacker could exploit this...
Windows x86 - Hide Console Window Shellcode (182 bytes)
Windows x86 - Hide Console Window Shellcode 182 bytes. Shellcode exploit for Winx86 platform / MIT License Copyright c 2017 Ege Balcı Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the...
CVE-2017-6798
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...
Design/Logic Flaw
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...
CVE-2017-6798
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208...
CVE-2017-6798
CVE-2017-6798 affects Trend Micro Endpoint Sensor 1.6 before b1290. The vulnerability is a DLL hijacking issue in the Endpoint Sensor that could allow a remote attacker to execute arbitrary code in the context of an affected application. CVSS metrics indicate a HIGH base score with Local attack v...